Check Point Certified Troubleshooting Administrator - R81.20 (CCTA) v1.0

Page:    1 / 5   
Exam contains 75 questions
Expand All

Running tcpdump causes a significant increase on CPU usage, what other option you should use?

  • A. o
  • B. O
  • C. I
  • D. i


Answer : A

When accessing License Status in Smart Console, what information is available?

  • A. Blade Name, License Status, Expiration Date, Additional info
  • B. Expiration Date, Status, SKU, Signature Key
  • C. Blade Name, Expiration Date, Attached to, Status
  • D. License Status, Blade Name, Report available, Download


Answer : C

Which command shows the installed licenses and contracts on a Check Point device?

  • A. cplicenses print -x
  • B. cplic print -s
  • C. fwlic print -x
  • D. cplic print -x


Answer : D

You need to capture NAT information into packet capture, what tool is the best suitable for this task?

  • A. tcpdump
  • B. fw monitor
  • C. cppcap
  • D. fw ctl zdebug + xlate xltrc nat


Answer : D

What file extension should be used with fw monitor to allow the output file to be imported and read in Wireshark?

  • A. .pea
  • B. .exe
  • C. .cap
  • D. .tgz


Answer : C

Where can a Check Point customer find information about product licenses they own, download product manuals and get information about product support expiration?

  • A. Smart Console
  • B. PartnerMAP portal
  • C. UserCenter portal
  • D. In security management server via CLI and executing command cplic print


Answer : C

What is the difference between the “Super User” and “Read Write All” SmartConsole permission profiles?

  • A. “Read Write All” has the extra ability to make changes within the Gaia operating system
  • B. “Super User” has the extra ability to administer other administrative accounts
  • C. “Super User” has the extra ability to make changes within the Gaia operating system
  • D. “Super User” had the extra ability of being able to use the Management API


Answer : B

What are two types of SAs in the VPN negotiation?

  • A. IKE and VPND SA
  • B. IKE SA and VPN SA
  • C. IKE SA and IPsec SA
  • D. VPN SA and Main SA


Answer : C

What are the commands to verify the Smart Contracts on the Security Gateway?

  • A. cpconfig and contracts_mgmt
  • B. cpconflg and cpcontract
  • C. cpinfo and cplic
  • D. contract_util and cplic


Answer : D

Which of the following is a valid way to capture packets on Check Point gateways?

  • A. Firewall logs
  • B. Wireshark
  • C. tcpdump
  • D. Network taps


Answer : C

You tested the connection from source to destination and you are not able to find logs in your Security Management. What is the best possible reason?

  • A. The FWM process crashed on Security Management, therefore logging will not work.
  • B. There is not enough storage in Security Management, so the logs can't be stored.
  • C. The logging blade was not enabled on Security Gateway.
  • D. The gateway is logging locally.


Answer : C

Which type of NAT allows both incoming and outgoing connections?

  • A. Both Static and Hide NAT
  • B. Hide NAT
  • C. Static NAT
  • D. Port NAT


Answer : A

How many different types of Service Requests exist?

  • A. 2
  • B. 3
  • C. 4
  • D. 5


Answer : B

Select the correct statement about service contracts.

  • A. Valid service contracts must be stored only on the Security Gateways that have Threat Prevention blades enabledB. Service contracts are provided on paper only
  • C. Valid service contracts are only stored and required on Primary Security Management Server and never downloaded on any other system
  • D. Valid service contracts must be stored on the Security Management Server before they can be downloaded to a Security Gateway


Answer : D

What is the name of Software Blade Package containing CDR (Content Disarm & Reconstruction) and Zero Day protection?

  • A. ТЕ - Threat Emulation
  • B. SNBT - Sandblast
  • C. NGTX - Next Generation Threat Prevention and Extraction
  • D. NGTP - Next Generation Threat Prevention


Answer : B

Page:    1 / 5   
Exam contains 75 questions
Expand All

Talk to us!

Have any questions or issues ? Please dont hesitate to contact us

[email protected]

Certlibrary.com is owned by MBS Tech Limited: Room 1905 Nam Wo Hong Building, 148 Wing Lok Street, Sheung Wan, Hong Kong. Company registration number: 2310926
Certlibrary doesn't offer Real Microsoft Exam Questions. Certlibrary Materials do not contain actual questions and answers from Cisco's Certification Exams.
CFA Institute does not endorse, promote or warrant the accuracy or quality of Certlibrary. CFA® and Chartered Financial Analyst® are registered trademarks owned by CFA Institute.
Terms & Conditions | Privacy Policy